DNSSEC Analyzer

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-04-23 12:41:40 UTC, NTP stratum 4

Analyzing DNSSEC problems for PKI.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Error querying a.root-servers.net/2001:503:ba3e:0:0:0:2:30 for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (864 bytes) ;; HEADER SECTION ;; id = 40057 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to k.root-servers.net for PKI.GOV/A
	Error querying k.root-servers.net/2001:7fd:0:0:0:0:0:1 for PKI.GOV/A: 'IPv6 transport disabled'
	Received 662 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (662 bytes) ;; HEADER SECTION ;; id = 17746 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190506120000 20190423110000 25266 . g3ZXtrY7tD47ZWnskE2jH9gtnnMSuwV08RMYaoYqLSD7O2yxPLMImcO472UAwHsBLBAJSZl6MEpe 3fIQ6/4c1a4skSRoaVYDEXf6zXiw1jNCoGrOtSuFujKgLiDcNo24ttwJuJE/QeSx9129+UVZQrpJ INuS/gRz7e3Uv6zF09+SwXRC0h8dyVBBh0fPi13CTZPaAWSLEcGrO8iqdlGJFXIrbDvhybhD2DzL b2LuyuIA4qdkBgHW7Qe3Dz2XGjNd7+5Yw6waRGcm30jTlFQXBjpOVlY15nQKUn1t2WTYP4gDgPic fd1daJfKrHomOYFVTo7ZrPmui4M8e8kv4cC+qA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to i.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (661 bytes) ;; HEADER SECTION ;; id = 2555 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190506120000 20190423110000 25266 . g3ZXtrY7tD47ZWnskE2jH9gtnnMSuwV08RMYaoYqLSD7O2yxPLMImcO472UAwHsBLBAJSZl6MEpe 3fIQ6/4c1a4skSRoaVYDEXf6zXiw1jNCoGrOtSuFujKgLiDcNo24ttwJuJE/QeSx9129+UVZQrpJ INuS/gRz7e3Uv6zF09+SwXRC0h8dyVBBh0fPi13CTZPaAWSLEcGrO8iqdlGJFXIrbDvhybhD2DzL b2LuyuIA4qdkBgHW7Qe3Dz2XGjNd7+5Yw6waRGcm30jTlFQXBjpOVlY15nQKUn1t2WTYP4gDgPic fd1daJfKrHomOYFVTo7ZrPmui4M8e8kv4cC+qA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to e.root-servers.net for GOV/DS
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for GOV/DS: 'IPv6 transport disabled'
	Received 403 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (403 bytes) ;; HEADER SECTION ;; id = 58716 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190506120000 20190423110000 25266 . g3ZXtrY7tD47ZWnskE2jH9gtnnMSuwV08RMYaoYqLSD7O2yxPLMImcO472UAwHsBLBAJSZl6MEpe 3fIQ6/4c1a4skSRoaVYDEXf6zXiw1jNCoGrOtSuFujKgLiDcNo24ttwJuJE/QeSx9129+UVZQrpJ INuS/gRz7e3Uv6zF09+SwXRC0h8dyVBBh0fPi13CTZPaAWSLEcGrO8iqdlGJFXIrbDvhybhD2DzL b2LuyuIA4qdkBgHW7Qe3Dz2XGjNd7+5Yw6waRGcm30jTlFQXBjpOVlY15nQKUn1t2WTYP4gDgPic fd1daJfKrHomOYFVTo7ZrPmui4M8e8kv4cC+qA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20190506120000 20190423110000 25266 . g3ZXtrY7tD47ZWnskE2jH9gtnnMSuwV08RMYaoYqLSD7O2yxPLMImcO472UAwHsBLBAJSZl6MEpe 3fIQ6/4c1a4skSRoaVYDEXf6zXiw1jNCoGrOtSuFujKgLiDcNo24ttwJuJE/QeSx9129+UVZQrpJ INuS/gRz7e3Uv6zF09+SwXRC0h8dyVBBh0fPi13CTZPaAWSLEcGrO8iqdlGJFXIrbDvhybhD2DzL b2LuyuIA4qdkBgHW7Qe3Dz2XGjNd7+5Yw6waRGcm30jTlFQXBjpOVlY15nQKUn1t2WTYP4gDgPic fd1daJfKrHomOYFVTo7ZrPmui4M8e8kv4cC+qA== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 743 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (743 bytes) ;; HEADER SECTION ;; id = 36427 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. GjRUnOLfnBAtIlt6hLcfcO1H6NuS90vNTDPZ+AQznOz3HueEqBORAmtN1Yr1z0Bnu7LHCEUVijJN SAfPRqPhwhnwBUWDHBahKuDspOKEJtNHzO5Wag4dk5n9szFVyIf6oWOPc5B0NLZc/9phCu4it24X FOynCwl+G5Fo1bFQaMfoh1CSDwZeq90LFwjLUOOKMMcwHdTVL7DIreDuGsqkFS4ZX5MoqztrUkmj TN9nF9soq7kSUiyPtbGy0c+FgMc8iEE5weI0bYXC2J8msnsFQijTQTPiwZGSIVZD5l74b2uK1SVq rHZULW5BRRnVaAGCEVLU8gTPZS0GRBNWNQcbWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. GjRUnOLfnBAtIlt6hLcfcO1H6NuS90vNTDPZ+AQznOz3HueEqBORAmtN1Yr1z0Bnu7LHCEUVijJN SAfPRqPhwhnwBUWDHBahKuDspOKEJtNHzO5Wag4dk5n9szFVyIf6oWOPc5B0NLZc/9phCu4it24X FOynCwl+G5Fo1bFQaMfoh1CSDwZeq90LFwjLUOOKMMcwHdTVL7DIreDuGsqkFS4ZX5MoqztrUkmj TN9nF9soq7kSUiyPtbGy0c+FgMc8iEE5weI0bYXC2J8msnsFQijTQTPiwZGSIVZD5l74b2uK1SVq rHZULW5BRRnVaAGCEVLU8gTPZS0GRBNWNQcbWQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=43583 is now in the chain-of-trust
	Query to b.gov-servers.net for PKI.GOV/A
	Received 493 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (493 bytes) ;; HEADER SECTION ;; id = 5884 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) PKI.GOV. 86400 IN NS dns1.PKI.GOV. PKI.GOV. 86400 IN NS dns2.PKI.GOV. PKI.GOV. 3600 IN DS 55612 8 1 9cd4a944de20a025df1c265b4c5b0fb9e6ef6791 PKI.GOV. 3600 IN DS ( 55612 8 2 a615d7a4bd66a62f3f4759b278338306c57603f3149a5bdf90e006d57ab6d642 ) PKI.GOV. 3600 IN DS 23245 8 1 f40d97a5745a7e4077222ef0be032079d6e964e2 PKI.GOV. 3600 IN DS ( 23245 8 2 ae6c73b09efa1441ceb8f9ed541fd3d5858bb9135c912151ec488e5d202e4ed2 ) PKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190430101007 20190423101007 43583 gov. UDRCeyJjCB2Y8y34H1y42DzTk1ojrsThRPtivrP9n163wFizCVqj458ijBAt0Q1XUn5juQBBY3DV JNuepAhY5p/i5Jygn/5CvHFM25bVDwRa79tUgO7NxVpZ8gry3mKxwi9PQ3Zkt6miBssNvfBmcuK8 z14ZAoo2n572eL3HuGw= ) ;; ADDITIONAL SECTION (5 records) dns1.PKI.GOV. 86400 IN A 199.167.92.100 dns1.PKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.PKI.GOV. 86400 IN A 199.167.93.100 dns2.PKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for PKI.GOV/DNSKEY
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for PKI.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 493 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (493 bytes) ;; HEADER SECTION ;; id = 33866 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) PKI.GOV. 86400 IN NS dns1.PKI.GOV. PKI.GOV. 86400 IN NS dns2.PKI.GOV. PKI.GOV. 3600 IN DS 23245 8 1 f40d97a5745a7e4077222ef0be032079d6e964e2 PKI.GOV. 3600 IN DS ( 23245 8 2 ae6c73b09efa1441ceb8f9ed541fd3d5858bb9135c912151ec488e5d202e4ed2 ) PKI.GOV. 3600 IN DS 55612 8 1 9cd4a944de20a025df1c265b4c5b0fb9e6ef6791 PKI.GOV. 3600 IN DS ( 55612 8 2 a615d7a4bd66a62f3f4759b278338306c57603f3149a5bdf90e006d57ab6d642 ) PKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190430101007 20190423101007 43583 gov. UDRCeyJjCB2Y8y34H1y42DzTk1ojrsThRPtivrP9n163wFizCVqj458ijBAt0Q1XUn5juQBBY3DV JNuepAhY5p/i5Jygn/5CvHFM25bVDwRa79tUgO7NxVpZ8gry3mKxwi9PQ3Zkt6miBssNvfBmcuK8 z14ZAoo2n572eL3HuGw= ) ;; ADDITIONAL SECTION (5 records) dns1.PKI.GOV. 86400 IN A 199.167.92.100 dns2.PKI.GOV. 86400 IN A 199.167.93.100 dns1.PKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 dns2.PKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone PKI.GOV

PKI.GOV

	Checking DS between GOV and PKI.GOV
	Query to a.gov-servers.net for PKI.GOV/DS
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for PKI.GOV/DS: 'IPv6 transport disabled'
	Received 367 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (367 bytes) ;; HEADER SECTION ;; id = 50944 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN DS ;; ANSWER SECTION (5 records) PKI.GOV. 3600 IN DS 55612 8 1 9cd4a944de20a025df1c265b4c5b0fb9e6ef6791 PKI.GOV. 3600 IN DS ( 55612 8 2 a615d7a4bd66a62f3f4759b278338306c57603f3149a5bdf90e006d57ab6d642 ) PKI.GOV. 3600 IN DS 23245 8 1 f40d97a5745a7e4077222ef0be032079d6e964e2 PKI.GOV. 3600 IN DS ( 23245 8 2 ae6c73b09efa1441ceb8f9ed541fd3d5858bb9135c912151ec488e5d202e4ed2 ) PKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190430101007 20190423101007 43583 gov. UDRCeyJjCB2Y8y34H1y42DzTk1ojrsThRPtivrP9n163wFizCVqj458ijBAt0Q1XUn5juQBBY3DV JNuepAhY5p/i5Jygn/5CvHFM25bVDwRa79tUgO7NxVpZ8gry3mKxwi9PQ3Zkt6miBssNvfBmcuK8 z14ZAoo2n572eL3HuGw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for PKI.GOV in the GOV zone
	DS=55612/SHA-1 has algorithm RSASHA256
	DS=55612/SHA-256 has algorithm RSASHA256
	DS=23245/SHA-1 has algorithm RSASHA256
	DS=23245/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`PKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190430101007 20190423101007 43583 gov. UDRCeyJjCB2Y8y34H1y42DzTk1ojrsThRPtivrP9n163wFizCVqj458ijBAt0Q1XUn5juQBBY3DV JNuepAhY5p/i5Jygn/5CvHFM25bVDwRa79tUgO7NxVpZ8gry3mKxwi9PQ3Zkt6miBssNvfBmcuK8 z14ZAoo2n572eL3HuGw= )`
	RRSIG=43583 and DNSKEY=43583 verifies the DS RRset
	DS=55612/SHA-1 is now in the chain-of-trust
	DS=23245/SHA-1 is now in the chain-of-trust
	`PKI.GOV. 3600 IN DS 55612 8 1 9cd4a944de20a025df1c265b4c5b0fb9e6ef6791`
	`PKI.GOV. 3600 IN DS ( 55612 8 2 a615d7a4bd66a62f3f4759b278338306c57603f3149a5bdf90e006d57ab6d642 )`
	`PKI.GOV. 3600 IN DS 23245 8 1 f40d97a5745a7e4077222ef0be032079d6e964e2`
	`PKI.GOV. 3600 IN DS ( 23245 8 2 ae6c73b09efa1441ceb8f9ed541fd3d5858bb9135c912151ec488e5d202e4ed2 )`
	Query to dns1.PKI.GOV for PKI.GOV/DNSKEY
	Error querying dns1.PKI.GOV/2620:9b:c000:9200:12:0:0:30 for PKI.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 2320 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (2320 bytes) ;; HEADER SECTION ;; id = 57551 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) PKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbttaBYSX4mC1PZuj6FkDRYzJMyY5qPjYTgH6Sr8yk3xmZrEFxDnm1bcTv8yDK8dzaJPfwCh z6KPo6wPkhU2ZHN/hU+xqdifJprJ2dmRY38ngURtfcJPMTUQsscK93lCHR8wMF0HGV4FXjt1Pwcr tpGOORhaSXfDpRf9USTLLMuwCTD7OoOwd9GZTqDoMe/ljyc/9NvlwgWZ7AhMBHA73ymlbUI2dk0k 5kEWtRqSJ9/SAlG02DGg4beZbdh7DmV9HUzuTGm6a4cK8J2yXJ/lkKFgFAsSQQ/d7N0eyxVF64pn d9PHjp2EXjCYVIyQqbhq7JVitc9ldBLmgNYfdkVexlU= ) ; Key ID = 17376 PKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAa8X0tx8kv8kNz0CN0sUjN85nJbul91s38Y+ZggSq9C5CLOQjpthxMBUZBsrJ6evYsYnzqGJ 3NyQTNQ94fyfkh9Y7nYvGAwHyM+MoCMDeEn074rqtKONGvKZeQbotUffh5xZJVF7wYALup8d/YR2 4H/bAl/FsZxqrPs9J4M47NYpgzYn+pELqsWkjKQeY9UBJ+Io92qAI3AJVfJ9qRg7NlxsX46e7CM0 xKCgwXT/zQ9yzYfhqztNdcBW8wwDRCfSorfR7P+NN5U10sQL0RQfhz6i4WvVZbgy/RqGn2APkgxo yn4vTXDqFJyZX/f/KwBnOCaLQipfCECLNvX4+kQruVk= ) ; Key ID = 52401 PKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbV34PXpVZ82jZoA7+MPoD1U+IP6KsD4OcycHamdD0Jf/WAos1s/xAbmGXzzOl2CgtayxxKp /nEFY8N1YJsV8DUUyV1GW6GtNsXaLQnG045Z5B/IbJtn9NwPXAAzSyYRr8V7CRlIfIwTnjPhcR0K CoW9X+uLJqUH6S3XQ792057zU1GnzMRPVVpnBTMaKnzMZRqwsEORukD/2xbrQVkZycftC/JCaPSR lHyyrQcj8IoyByYWJc8gi5tsS9k1S8iJHgzp+t60EI04/poIfkn+PnULNLmBFOpAdOgpvD93JsJn 7jhZ6nJ8XZUVwvEoqkAynwkCMaiTp08zfy2kdyxamNs= ) ; Key ID = 55612 PKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAZEnNk1nNHzYqxAA9j2D6pjYhaToz/Z2bwjvGnn9m1N7V+qUjqvd2YUzroD1o8g7U6ZDkQJV tFr4CeLq0rdExqGhrA4+7XTWaV+h6K2sXtvXkIATlo1efabYlTo6ZrWiBVTaehzhZb1otKABiuYm 27H6K2XMOjfrrAcPkYoGpKqXktw8sQZDKYzJ/94mqqzA9K0S9yUrXYzRr1c7ysI01uRIhJ/CGja6 6PdrOJRLOPv3zdqFCBMWDZubxNQHCj/Bb2b9/X5OyPtYuFaiRNuC+YsSFeKBWybcXLFLzPspULmL 6VJ+/NoE3cWzItCx1E0849nj8BONkAyfC3HdtAKfLy8= ) ; Key ID = 23245 PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190428050225 20190421050225 17376 pki.gov. Vo/CVpCGEP80qiRp5JTIsGvdZc6TIkvkOgLFM/ytOw+FywnfdVFuC32rtHa9TGnK3rF60nFjpHo9 IvYBVToPQIG16wrfCwuB0mPlxfqf7ezxd2eDTzowwsD0m580SDXNCkNQt5mDwMQpcE6G6I2uVWqY xuVegL4uSYn/yiTDiraJMY5o/T0jF6S7BGJxMXwsP0d8/xZf3SNQ00wcnJ+Dita+di/F4UWCV62u f3vcC0loqyfFLcBZ0JBHwaN8MJpbWgoKPCSrIdK0/mJZRRkaVPIJ5tvf9kcnrFu8otgeFed8jTvA tTaHlt94M3B9IPO+CgcyNFncedy8m1zqtcfXJg== ) PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190428050225 20190421050225 52401 pki.gov. lvpKHQUd8Npl6uXG+2zXYxpFed25bQjIqugplsWZdMGnQL+U/O/BQKh95CF9pUtf6QCHKOMpk/gZ 88ufKQ3hlpydHokVyEVuPgCC2POXsNEZEaDOg4sDwYtwwkFndlLIg098FOhJQwlJ8y1EW3bRUd9H 77NULJXtx1ubSRO05ee4adkasXgF5D4WklDG6v69b/RJfOn7ciIS4bOBOQqBKYMDhC2sRm0wFtQS XAQ8JjYycRAgo9pv3ehwus70SRdRqMIWInqs4PvSRXA6DAkDZWq0UYt5kzsBm//2hFdJMViuTrHB Q2MyIRYofdsV7fG4kscSmKCOMMrRSpCySVSEmA== ) PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190428050225 20190421050225 55612 pki.gov. X0xOG1E+xDfQxTMM1rUk07WYnHiEDEXjIBPrAthThG1gXVVENauR2MjCu5vzAUbePrabUhR/XjIt inmV/Yy8lRRKKvgXe3TOyFtSnixNbbHr8fTXEzQc83UPhKqpMrMX4FkyA87rXADKtD9KSV9c375r wR63ASKXQQ6HbNVXPiz2gF4G7jy3IjeffpaLe+ZgYHXD3UlrdkZ8RmSBMRTi4cVHFll93hamz/WY 1WZTj/8nujTqwFwWFLWBO69iqVLAO7plrONGNO0DbFnv6liBDp8MBuVrugHVma5bYB5a0P87Vsj3 whz+kWIz2TO8J6t5deb6WpD/WckwbSBHCq2kGw== ) PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190428050225 20190421050225 23245 pki.gov. K1XU4ukHVTDGj6PYIK1Wlv4n+UYD/aC8ZC2kaX8LecbpIYaiCkiCSySQlwYNKAq6A8KEvoLtGnFU MadXKo7H5tSRpp7E7Nwy72KB99iW+W9QjrTHWuG3gFSHpVnoDwNtyAFmSQytDC3z7IYH/lvc+mQW dMju7PW3vrqhrB1vP+H0OukhDvFN9WS0/643ECcXf12wSpivPIP1U3FldxLn4dZ0dtqXe+BZ/Tf/ QsQ3w8qSeGi5HYE341Y8f3eQSqUrnOnIqjYo8H7Q3TQ0Jl+brst7J/rFwUaYTkttNA7ImjW+DTIm DqU1slTtYKunT0nu5WfCPKX2+8+0EOtd42YVdg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for PKI.GOV
	`PKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbttaBYSX4mC1PZuj6FkDRYzJMyY5qPjYTgH6Sr8yk3xmZrEFxDnm1bcTv8yDK8dzaJPfwCh z6KPo6wPkhU2ZHN/hU+xqdifJprJ2dmRY38ngURtfcJPMTUQsscK93lCHR8wMF0HGV4FXjt1Pwcr tpGOORhaSXfDpRf9USTLLMuwCTD7OoOwd9GZTqDoMe/ljyc/9NvlwgWZ7AhMBHA73ymlbUI2dk0k 5kEWtRqSJ9/SAlG02DGg4beZbdh7DmV9HUzuTGm6a4cK8J2yXJ/lkKFgFAsSQQ/d7N0eyxVF64pn d9PHjp2EXjCYVIyQqbhq7JVitc9ldBLmgNYfdkVexlU= ) ; Key ID = 17376`
	`PKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAa8X0tx8kv8kNz0CN0sUjN85nJbul91s38Y+ZggSq9C5CLOQjpthxMBUZBsrJ6evYsYnzqGJ 3NyQTNQ94fyfkh9Y7nYvGAwHyM+MoCMDeEn074rqtKONGvKZeQbotUffh5xZJVF7wYALup8d/YR2 4H/bAl/FsZxqrPs9J4M47NYpgzYn+pELqsWkjKQeY9UBJ+Io92qAI3AJVfJ9qRg7NlxsX46e7CM0 xKCgwXT/zQ9yzYfhqztNdcBW8wwDRCfSorfR7P+NN5U10sQL0RQfhz6i4WvVZbgy/RqGn2APkgxo yn4vTXDqFJyZX/f/KwBnOCaLQipfCECLNvX4+kQruVk= ) ; Key ID = 52401`
	`PKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbV34PXpVZ82jZoA7+MPoD1U+IP6KsD4OcycHamdD0Jf/WAos1s/xAbmGXzzOl2CgtayxxKp /nEFY8N1YJsV8DUUyV1GW6GtNsXaLQnG045Z5B/IbJtn9NwPXAAzSyYRr8V7CRlIfIwTnjPhcR0K CoW9X+uLJqUH6S3XQ792057zU1GnzMRPVVpnBTMaKnzMZRqwsEORukD/2xbrQVkZycftC/JCaPSR lHyyrQcj8IoyByYWJc8gi5tsS9k1S8iJHgzp+t60EI04/poIfkn+PnULNLmBFOpAdOgpvD93JsJn 7jhZ6nJ8XZUVwvEoqkAynwkCMaiTp08zfy2kdyxamNs= ) ; Key ID = 55612`
	`PKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAZEnNk1nNHzYqxAA9j2D6pjYhaToz/Z2bwjvGnn9m1N7V+qUjqvd2YUzroD1o8g7U6ZDkQJV tFr4CeLq0rdExqGhrA4+7XTWaV+h6K2sXtvXkIATlo1efabYlTo6ZrWiBVTaehzhZb1otKABiuYm 27H6K2XMOjfrrAcPkYoGpKqXktw8sQZDKYzJ/94mqqzA9K0S9yUrXYzRr1c7ysI01uRIhJ/CGja6 6PdrOJRLOPv3zdqFCBMWDZubxNQHCj/Bb2b9/X5OyPtYuFaiRNuC+YsSFeKBWybcXLFLzPspULmL 6VJ+/NoE3cWzItCx1E0849nj8BONkAyfC3HdtAKfLy8= ) ; Key ID = 23245`
	DNSKEY=55612/SEP is now in the chain-of-trust
	DS=55612/SHA-1 verifies DNSKEY=55612/SEP
	DS=55612/SHA-256 verifies DNSKEY=55612/SEP
	DNSKEY=23245/SEP is now in the chain-of-trust
	DS=23245/SHA-1 verifies DNSKEY=23245/SEP
	DS=23245/SHA-256 verifies DNSKEY=23245/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190428050225 20190421050225 17376 pki.gov. Vo/CVpCGEP80qiRp5JTIsGvdZc6TIkvkOgLFM/ytOw+FywnfdVFuC32rtHa9TGnK3rF60nFjpHo9 IvYBVToPQIG16wrfCwuB0mPlxfqf7ezxd2eDTzowwsD0m580SDXNCkNQt5mDwMQpcE6G6I2uVWqY xuVegL4uSYn/yiTDiraJMY5o/T0jF6S7BGJxMXwsP0d8/xZf3SNQ00wcnJ+Dita+di/F4UWCV62u f3vcC0loqyfFLcBZ0JBHwaN8MJpbWgoKPCSrIdK0/mJZRRkaVPIJ5tvf9kcnrFu8otgeFed8jTvA tTaHlt94M3B9IPO+CgcyNFncedy8m1zqtcfXJg== )`
	`PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190428050225 20190421050225 52401 pki.gov. lvpKHQUd8Npl6uXG+2zXYxpFed25bQjIqugplsWZdMGnQL+U/O/BQKh95CF9pUtf6QCHKOMpk/gZ 88ufKQ3hlpydHokVyEVuPgCC2POXsNEZEaDOg4sDwYtwwkFndlLIg098FOhJQwlJ8y1EW3bRUd9H 77NULJXtx1ubSRO05ee4adkasXgF5D4WklDG6v69b/RJfOn7ciIS4bOBOQqBKYMDhC2sRm0wFtQS XAQ8JjYycRAgo9pv3ehwus70SRdRqMIWInqs4PvSRXA6DAkDZWq0UYt5kzsBm//2hFdJMViuTrHB Q2MyIRYofdsV7fG4kscSmKCOMMrRSpCySVSEmA== )`
	`PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190428050225 20190421050225 55612 pki.gov. X0xOG1E+xDfQxTMM1rUk07WYnHiEDEXjIBPrAthThG1gXVVENauR2MjCu5vzAUbePrabUhR/XjIt inmV/Yy8lRRKKvgXe3TOyFtSnixNbbHr8fTXEzQc83UPhKqpMrMX4FkyA87rXADKtD9KSV9c375r wR63ASKXQQ6HbNVXPiz2gF4G7jy3IjeffpaLe+ZgYHXD3UlrdkZ8RmSBMRTi4cVHFll93hamz/WY 1WZTj/8nujTqwFwWFLWBO69iqVLAO7plrONGNO0DbFnv6liBDp8MBuVrugHVma5bYB5a0P87Vsj3 whz+kWIz2TO8J6t5deb6WpD/WckwbSBHCq2kGw== )`
	`PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190428050225 20190421050225 23245 pki.gov. K1XU4ukHVTDGj6PYIK1Wlv4n+UYD/aC8ZC2kaX8LecbpIYaiCkiCSySQlwYNKAq6A8KEvoLtGnFU MadXKo7H5tSRpp7E7Nwy72KB99iW+W9QjrTHWuG3gFSHpVnoDwNtyAFmSQytDC3z7IYH/lvc+mQW dMju7PW3vrqhrB1vP+H0OukhDvFN9WS0/643ECcXf12wSpivPIP1U3FldxLn4dZ0dtqXe+BZ/Tf/ QsQ3w8qSeGi5HYE341Y8f3eQSqUrnOnIqjYo8H7Q3TQ0Jl+brst7J/rFwUaYTkttNA7ImjW+DTIm DqU1slTtYKunT0nu5WfCPKX2+8+0EOtd42YVdg== )`
	RRSIG=17376 and DNSKEY=17376 verifies the DNSKEY RRset
	RRSIG=52401 and DNSKEY=52401 verifies the DNSKEY RRset
	RRSIG=55612 and DNSKEY=55612/SEP verifies the DNSKEY RRset
	RRSIG=23245 and DNSKEY=23245/SEP verifies the DNSKEY RRset
	DNSKEY=17376 is now in the chain-of-trust
	DNSKEY=52401 is now in the chain-of-trust
	Query to dns2.PKI.GOV for PKI.GOV/A
	Received 1356 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1356 bytes) ;; HEADER SECTION ;; id = 9068 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) PKI.GOV. 500 IN SOA ( dns1.PKI.GOV. hostmaster.dns1.PKI.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190427084639 20190420084639 17376 pki.gov. g4CE6Klke3CKDrlEpbcQqdz6HLnGSHrOPB8YZOpK9vLp5duB+ZPf+eWQasBcF4CwXvsoiKDjeOvq G2x4IWcEd8gjOhF+MmCI8p80Zzk4BsiiQAIEdCxSSNLd0ziDnptjfoAJy7f225gfdTtBq/ycYc10 pmdPV4PJzlywbcCWpwCBXbXc5tk2cFH6DT+oWqEm5vnTeXUT6kXMAA+ZhzQO4Cvvie/k8FfSOrt6 L2OYF694yOWoTaBikbKATia77/ERmy9CYlPxcx+busKPoFMS/a4GAEPTiO1I6ByELPEGpm+e51OO EAUZ5ushTmFxLpp2gl6cIqbxD8StlYAdiIgY/A== ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190428052956 20190421052956 52401 pki.gov. BdoJIaY7OFPnSXzdsCEadgJGH2Cww6XpFpGE1SYpgWANz/wmGAU50MGuJ1RRGROPVyVFEEM2+D2/ 3q35kQQBTvQvfqQgVAdhnz7Vr3i3I1ZlnNwORGK5Ksx1B9uaSSLSoDQVAodIph8jnuK4wBtxpc1n DYEEHX8QyPYmPOkXxVWIF2VttDUQcn8zwWOMZ6KA2YGpbRTjtPwW6vA2x3XST4VGoWFJnmHijoTT 1lQAKzQW4eZ7q8ab3nKIH2GD6weqs84l3xHkInx1T8xFebQmR6DnK5raqaXgv1D2Wq5MOdXm/Cva 4rcH0BCfGYfX9R1sOqZrfB6f4MB3zZw2XaKGaA== ) 87b20t2aeebgsib07k0tt2kkne3ke781.PKI.GOV. 86400 IN NSEC3 ( 1 0 1 84bc480ffa0274fb 87b20t2aeebgsib07k0tt2kkne3ke782 NS SOA RRSIG DNSKEY NSEC3PARAM ) 87b20t2aeebgsib07k0tt2kkne3ke781.PKI.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190427122748 20190420122748 17376 pki.gov. U18TpVYro4GaeTsoMVU9eSJGtPQaGkDDBqf/wWLqblEEX9nlOTZVCtJjp1uYcGxwaMchvgzOkP58 zmXxApRArTCtAcFOcTvQvmVMTMEksgvoNW56IXUxopve7h1R1VIMcShASyW/tfHz2sKEJmF5sbF5 fVOH4P8jkLBx+THW28UdUrv5/XL5vtyLsr9rVSfsLlyRz95mWW8EyAyNG7PX69/2ligoloWdiH6d 3bN3weou76FKqdjRYp270Z/LNM8YG3d/NeCqh+MVd7jh2yIFXu3iWxX+W0T3qILVMG1BbCsvtrSn GSez4UQH25omPiU6nxaBBpyQCsFndHrzXKkZOQ== ) 87b20t2aeebgsib07k0tt2kkne3ke781.PKI.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190428070918 20190421070918 52401 pki.gov. hVyLLUSiJ8LxTaJ6PgcrzwBEoHi4SlaYvftmodZJYJX/3IMN92RqyAXmFDc5MEuFw7/58hFzurps rojwOeMXne+/1XH0DDWTDVvbfDqYgcJymoG2WpH7ZR2D3SYc0NdN7Qzooib9og5A8ZHmp/L36Msr ebKcL06uwKDfb6a/sLjlhoOqe5Qp8fxBsIdRZ08pyK59V7sNniVjPpVArFUBp91eC/U6Ia9GCNUM CpKRFLwGKtb4vWhH9AHZP0G+MnMwl1o1nHkaFiwW8897O+DBqG4SNN3zFIfB90rnXuXku3Ssj1lp G03QKDmBBzua9O5VYP67QYD9ZhyE+tJoNmGpPQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	PKI.GOV is authoritative for PKI.GOV
	Found RRSIG signed by pki.gov zone
	Query to dns2.PKI.GOV for PKI.GOV/SOA
	Received 3749 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3749 bytes) ;; HEADER SECTION ;; id = 4708 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN SOA ;; ANSWER SECTION (3 records) PKI.GOV. 500 IN SOA ( dns1.PKI.GOV. hostmaster.dns1.PKI.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190427140641 20190420140641 17376 pki.gov. P7gK1RxQLU4WAOmV4X+riweigyYhgj1IDOe3igvyuLmb/GEf7yzkzkC4riKgIrLjblEFEKuTi9gh TbYlfVBzrW62OvWNh0KoC4XZbOCk82WJYkrqKi0vTD3uOl133LeqnE/ENKMZx2LjIPm5Zm1Bfcw1 N8V1441cwAtYEr7hJTIQHNOnFoR+AqBJSm2QqNBC9ll4iPCHjqIiKP1TQm6sTOoJSPt623wigAOa KAaQ1qg/PrN6pBWX0Vv4qMDEgXBAHsY4DOGeifjg5lelgRg88n0cVlNZL7OV64WON1FfkII05BC9 /VCFVbBwS1LidmOS5joOhAJqP4a67G+hphmtRg== ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190428042933 20190421042933 52401 pki.gov. KIbEgp7pNhwV/3JzaD42qP/vi4do62WoObM8Vfh9x/g9ccKy5yz/r427e3lqy5hePTjSbwaoPd6I OpKbLav58FMmOBe251RF8GdHIS2Qht2Bpq7kdp+AifPxQbC5OSKzMsp56G8Vmb9e9IoznA1UicOM MEWYC1Pb0BCoBJu3hr//SOLdF40Fj8uxNgJ8yBNdAsNxiICNOq12NPSr+yrhr1jm4nfQl8QYC6wq ttDwyPVg2Snu/Loj/l7/zvYeICO/VRl6Vb02nCkDhKCAqLIWY2W7sBU0tO/y29RcTdrTEbE5Vpak Ij1Kz+Zjxe9UtsnhDiSInPayWnoZUMcLACEtxA== ) ;; AUTHORITY SECTION (4 records) PKI.GOV. 500 IN NS dns1.PKI.GOV. PKI.GOV. 500 IN NS dns2.PKI.GOV. PKI.GOV. 500 IN RRSIG ( NS 8 2 500 20190428000825 20190421000825 17376 pki.gov. M4WcSZNx27s3pH+xaGPUXKW0layJeSF3FXi3zXAFwSMLYTcN7lGb5EaWdRRXoXQjcmGshrRcG971 ZCvN3pV9tXi3iU7ZpR7Mr9Kz3SGOetcLMOtpbfVqIYeay+khkK0PNKXPjWeMrFJwKRyt1WDUtZKt R8F9oLYS92YuyIvAjD67FFxdd0qIf+Bn+R/28jEux0NTnTS2JGOW3n195TI4bJ88G7TIAXVhUZ3Z FNrvleWwal8IEWtMnBvFM0v8Ti3iQsbjIwkqgYbbhMMpwtycibNOXWYmWDNpjdRmffNWeQQdl3+0 i0oojaLI9xADN84UphueqVfXk0nFxfbTkhDLPQ== ) PKI.GOV. 500 IN RRSIG ( NS 8 2 500 20190428112502 20190421112502 52401 pki.gov. cZpoxAP5wyLUzXi/DwrhCffoDH2IotlpmnLTjjqStX59vdzPlI08IKcaErZQ7D2k3cgtYTIYHezD JFUyXD0jHwyy2Jortdm3UrUlkO1BYvzfn5PxzHzJ+VYqaJWq77ydRBRJDz18PBDu4iRIqay036PR iMPrr85b4rZCtWIfwwwWxSx7Ff0yEQPV0zQ73qsr0uYBxOn2lH/NjeYCCgPq6CuA2WMIKYpTm4B1 JRXBVGE3HiXpCB/GFBMyiBuHdam0yY8pw7ekRO2Qp6AuZ0mRu2nfYaDjMbMWMFnXEV2rGSJhi2A6 wIg74RDOddzRYJeadduxbhV9BI2zwGuxd+hj5Q== ) ;; ADDITIONAL SECTION (13 records) dns1.PKI.GOV. 500 IN A 199.167.92.100 dns1.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190428000825 20190421000825 17376 pki.gov. hjl3wAw8hR3CXMiiRl11Cg/hpH/rEBPQEDlmtqPGfNgkEzc21675OVRNZhDvPKdWT0q2qwuGp7CN 8JExCHEZAi4+o+9nRyYMtvIbE1vieF5bzpdM/w5n3GcjpxcKU1Zcvcyifsg8IQSmzFc32dIn8QGq j/cUbNV4l/QGK7Kqgu325lPGwdSLtt5wRAo33r+le/dBpG4rP7mLE1lSHpDrcTybKHYi0Fq0+Txq JKUJ3Tn4g9k051IlhPhAiFp9M67sWDqHX+KSFnIi2N7HUxLqYm8qlvKe7Ud2yo0UFYWR87KPz15v xSzlHI4Ko4onz/jXICXaUx7CER34jgUsDarlrA== ) dns1.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190428112502 20190421112502 52401 pki.gov. qW18s61z7SGCfIleEZou26xlAdXgz4jLEoA9VLpYbs+/P/UlLLvlX7Uq2Yz4u8k/QUJAfVZyJfQz 1yMZ5ATvYPMdaU4K2FTAGLAd3f2h95dzRZ+6uUm0vSgdnNmsRr5eJvbpH21fXIqZ1TE3mfYaXsAh WKqWBwSSrGnukgwMazHqSYZ7/SWNIPIFJ2PiEyrMaXijX1eCr8SL4fRXEwPpn7SckVAK1JEvoZyE vnVf+uVkgMf/ItdMm+nWTLv6aEXSWg214zAgGuCkJTAUS2iEvMZ1MUrP7Pu2BQy34R6/ut+fkqos yp0n8OCnhs4SILImYF8fp5sNLeCzeAk9HRq0QA== ) dns2.PKI.GOV. 500 IN A 199.167.93.100 dns2.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190428000825 20190421000825 17376 pki.gov. ZsyAmFQWQyeaBk/HW/qNSEbnJMqJvzm0OzsJK21aBJUE64//qto+d+UcSYoJErqOPlhncfDVsW+3 lZ6uKsLFgQDGYqmpbZ4bSmzWzizTwETdmHzYOY1fdGSYlH8PifkvEKc2Q3b+AHKRHKGs011MR089 /nZgF7Z57K4+uUNzF5dHSUVms1RruG6jAeiSGN8Afy7oF7ftNuLQgTP//SWcB7XHcl9/pJP35YrH TGx/qyyQbQO7xvwhKAN+UEz6G+oouB4R7IR5U8Rtyd+KlM8BroZkD9udXCB9MnASw4up0VsR9SvX Fj8/6b4zcXerHKEGfD+f3P7YuxUzudT72naRpg== ) dns2.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190428112502 20190421112502 52401 pki.gov. nDNnRU824FxQeOqAEo4M5ied9gTrA6kmO1+uffezCxkkduvnAEBCq7+sJMoO3Fnc/13Ocarycfku Bp46YR6P9kkxLwbHz+KIuupmjUInN0j8TdAdbK5HU2xVvu1rODIQYWq/ZaFU0ShSg0Uee6G50Boj FEtZ/7Ru900aioUEoBTRp8R0sLXkUDy+IufIP1e2XvljB6jFzgjy9BXyrOMIBUCI45A75NUJfxL4 uOdjTXKbILOOVEcgAPvst5mAes0+7KBpI45tw99NCqk3wk+mKHssQeBrEBaN7u3Dh8F8E99Qf/uG vYlJ9sx6Ca0ceDvaWKXdoNwyUVxQyaE66wU4TA== ) dns1.PKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190428000825 20190421000825 17376 pki.gov. Zao0GzeTnDT7FKb25yHSCt4uSmvxmEOKRodsOIc8IjEx27MBihA3Stq9n5AcljXHV8NmNXsRlFXt xiOHeXuk/VBGTD+fvUSj/F5ay8G5uUdstMkc5Yd/qObGoZil8FTyfdgWh4S9waA7NB7hjmGtY+XT zzvgltjvW8EsjcV1snqCA2BlPHkuBYvrZFWOFA6I0D2yxA8KYhVzvyJ/0o9iJEWpEBKkFDciMNh6 O5UlDVN3YT/zsq7BPpo4Yn6j9Y0TIp37uFwN9AUjHhy52Mtsmdn3+BFUwS/znMT08vYn59V64gIc w7NGfr10yhFuN1x6f41dsqwWyfBIaDVAjPQGhw== ) dns1.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190428112502 20190421112502 52401 pki.gov. AuVwWIX9LOfJ85Vf8BQs1WCcoUo/veRcCgMWJ53NGWCdcJk920/wB5p+Oc2pOkTfxZcefqyN3Wwl z4g3/QTToN+V49i8ZPpbt+SIz2Qw4jXd6XruIezAInSGIpYc7y2sSyA8V8aRS/lByw4S97sRsaXp KylpRfpsgg+6NE0YC+6BVM5iH2AYG/VagHYGsMJjoqrXuLVfvBFsvz3EBtQXa0uPLFswBoqUAvKP gP7AQvk9gyNx0tcl0RtIJfeuZ9wdEBM9keeY/bzJM+dn06d3U7jcjx0rDP5R4H9HeaXd19xs9K3R Xi5JDFY7SIJqq5k7PdHZ8u04T1ret1pxIkm1Cw== ) dns2.PKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190428000825 20190421000825 17376 pki.gov. PSRMZS79cSEatURmt5rb1tNFFq3m+YJc9r/DkD3vfzbWE86a+GBmBI7Uox+lo+Hbu7HK6zrgqXs2 vM3b6J/mSUgV6dw/MzZG7Nt5Qn11QTx/tQL3NG6NLMNiR3J7lHnsCd1v4HU6w9xpqsTxXkS4InT8 /9yMnSAdBwE81aw4HqI4IwpRES3UL3EEwz7tVNWujkSgRhntZtajnZvr8V7WIFQbT2dvcvecllBn ji2X5C+HwD2U7z2EOf2aREMgvzXEC47zUZk/pzhSmeoaIznvOg7lnPz6cBDzxqDQVFpcWX9O7IhA mIUq039jfBBzN6C1TbZpsmzQLHzBy4IBoP27vQ== ) dns2.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190428112502 20190421112502 52401 pki.gov. lOmXfdtYAekCkW3Z4GDlNycWrYr1Oz2Wye8X8NBey5w7NCSxxG89GynS8/we91fcVCadv6wopuIV wRN0PCHGoUhb5rTrZdE6QNRJBlVODmdBasCBgCIIfwYv5k1gUT6Bhs/ALsVQ1SwB9PkMPo58QIfC FePIzLHWhJ9lq0swQiN/mYzREBWfvXXP4uTZzV4ezZd6QdIk4jwj5AaLZMtx3DkttXC9sQ+MjaFk tnkx3+KswkhWkfxtBVcp1e4intvrT8iv7oxA9w5JlKfvV0NTZDzLdfcFzoFG7vHdrn3UOrOZkyxp F5hZ2N7s7ow7tOxnQE/xSs4EW7IuzI3Cp0iFgg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.PKI.GOV for PKI.GOV/SOA
	Received 3749 bytes from 199.167.92.100
	;; Answer received from 199.167.92.100 (3749 bytes) ;; HEADER SECTION ;; id = 34609 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN SOA ;; ANSWER SECTION (3 records) PKI.GOV. 500 IN SOA ( dns1.PKI.GOV. hostmaster.dns1.PKI.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190428012715 20190421012715 17376 pki.gov. U2NjM33vihp8injd9GC0p9PPyLn55XvV/2S9EVck3ggAYtkqC1Vm9H2eo3F8A9PttILL8uMLt8lG pPohW9zd7JG6wkaVFqU+tBJV1/tPiYWiwXd+2E9nu3JOEOeW0R21vCblKd/MWp5FaaIbP+s5ez4M ze3c2O/ds0nHO5dy5sT/JIa6U4fXRMTGiMc9rfIzx9vIopRiJHBNdfFjNp0ykrtcUygfKaIs+rfc noYaqP8fSdaSFgXWUA/is4KRL2bWGHOFqOtkPmrDOoS17JVN5j6oRpnMI9Z9ZYJ7b7RL0/bb1AqZ CtM62fK6Q0Jiwn69teZLRsWYocagW3P4M6CHTA== ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190428053045 20190421053045 52401 pki.gov. SMFVbJO0kERS6iSNfYn6MB5xwKcG2Kgf0c7ZMZ+4d99OxGw3KDuPRlsioY1CG5+csUm61Rb7oV4s XGlNorsjLcsI+pnoUZd/QtlY2o58JVp4rklPa7AkoEsbYHwcsEnpJwXVygAmXMLeU2Gz7gJq+85L AuyIbJRp8NHjtqvno6vRN7IsnqxDyxygOvUaol1/fNnqjATrrXKQHlcaqiixfXN6Mq6Aw6cR5+q8 pTLQrldMi5id1DAKmZCYJ5oHAPLcVWRhi0n+OiMsm/FkaH8k3tnCQx2iCmr9Jd5mS4uyz5ryV/Fi zI124nzr9j8ldk9emDkWclIHJn3m4V+JtCRtNw== ) ;; AUTHORITY SECTION (4 records) PKI.GOV. 500 IN NS dns2.PKI.GOV. PKI.GOV. 500 IN NS dns1.PKI.GOV. PKI.GOV. 500 IN RRSIG ( NS 8 2 500 20190428112502 20190421112502 17376 pki.gov. eH7cnT7URGb2X/jNpWF9OnMhPRVOz/fe8YwhA4W+KgSw7L7PthksSKw0LoHHQOsvTbcybNqBVdN6 XqTTLvyg18QzBKS8F4hWsQBbMpdtqgLT+uu4rfjHLbjSehZe1r3sA4lLDdmwq09Qu4EIwZbZe4zj BlJh5rQaaTwjvyos1i8TPnC+JHt+mp8oijst4AOxYfKDnRGz/40gpjBOasjSI64nj4//IfVbTaWO oRUU/to7Qx+6GevaUUBSmv5leES52t94Axn26JXcNzmzyQaxVtxYAJAF2XQ6MEJMKRW6p9zg9KDx pC3NY5jQDPZVIV2PhHmx5e3yfsGry+j9INF6+g== ) PKI.GOV. 500 IN RRSIG ( NS 8 2 500 20190428112502 20190421112502 52401 pki.gov. cZpoxAP5wyLUzXi/DwrhCffoDH2IotlpmnLTjjqStX59vdzPlI08IKcaErZQ7D2k3cgtYTIYHezD JFUyXD0jHwyy2Jortdm3UrUlkO1BYvzfn5PxzHzJ+VYqaJWq77ydRBRJDz18PBDu4iRIqay036PR iMPrr85b4rZCtWIfwwwWxSx7Ff0yEQPV0zQ73qsr0uYBxOn2lH/NjeYCCgPq6CuA2WMIKYpTm4B1 JRXBVGE3HiXpCB/GFBMyiBuHdam0yY8pw7ekRO2Qp6AuZ0mRu2nfYaDjMbMWMFnXEV2rGSJhi2A6 wIg74RDOddzRYJeadduxbhV9BI2zwGuxd+hj5Q== ) ;; ADDITIONAL SECTION (13 records) dns1.PKI.GOV. 500 IN A 199.167.92.100 dns1.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190428112502 20190421112502 17376 pki.gov. gxGopQn6lRruy0EzsRtuGxzPdiWxjuNiMVwIgQg8s85lG8EvxNpGrzkm6AJY/r877JP1VWKK5p6A Fb42vmOzREPJG10R7QDhY9vKDRyiVPKqoP4F4EZvGtLueMUyctqt3wykWjHy+uTbd7pjiyXmmLl8 rR/jOHG0sf2iUeCRxZBu836xX8p//dWD6wZ395EzfN7iLL+nKtX0MximFt35ogSkA1kDJuXCuEUf x3+L4nrefi3a752WXge0zrotaMOWnevRPXlacMpIbGfEmUm3tVOGTnhbiqfeQXD+pC6Ejaz7Q6tb DYsqtxmxn9YnsQbsgwqIqbENZaH789FRYRspyA== ) dns1.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190428112502 20190421112502 52401 pki.gov. qW18s61z7SGCfIleEZou26xlAdXgz4jLEoA9VLpYbs+/P/UlLLvlX7Uq2Yz4u8k/QUJAfVZyJfQz 1yMZ5ATvYPMdaU4K2FTAGLAd3f2h95dzRZ+6uUm0vSgdnNmsRr5eJvbpH21fXIqZ1TE3mfYaXsAh WKqWBwSSrGnukgwMazHqSYZ7/SWNIPIFJ2PiEyrMaXijX1eCr8SL4fRXEwPpn7SckVAK1JEvoZyE vnVf+uVkgMf/ItdMm+nWTLv6aEXSWg214zAgGuCkJTAUS2iEvMZ1MUrP7Pu2BQy34R6/ut+fkqos yp0n8OCnhs4SILImYF8fp5sNLeCzeAk9HRq0QA== ) dns2.PKI.GOV. 500 IN A 199.167.93.100 dns2.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190428112502 20190421112502 17376 pki.gov. I6spc8Jc/C0AemCWdqN6L33BwtIC8gkvL7o8HFoJgSLmrBF8/bE6ENcst1ICuaZreqiSlXofiVde K+BwgLxo932gAi2qdde0iw/iOhMX32UplefVqHsJWpPG4/8upODEpDQw+g4Y7iJ29RT9sRlGEQAW 0Xzx5qqwqYEgvPxdqHTbgMBE6AJxHG09LA2HLjXIQuJUDZtTYcO5j6oRSj3LJUfJLpPPa08C8Zkg 3Kkj3yiPRvLg3tKjdE8JEBRvjvr7KT2Mn1GZpXTc4UnOJkN9croMkKd1DA+rgvUPj9Q8CQavIaxY OYgQLkaowa4H06vc+Pr86EAfw7dZnZx9qHKBBA== ) dns2.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20190428112502 20190421112502 52401 pki.gov. nDNnRU824FxQeOqAEo4M5ied9gTrA6kmO1+uffezCxkkduvnAEBCq7+sJMoO3Fnc/13Ocarycfku Bp46YR6P9kkxLwbHz+KIuupmjUInN0j8TdAdbK5HU2xVvu1rODIQYWq/ZaFU0ShSg0Uee6G50Boj FEtZ/7Ru900aioUEoBTRp8R0sLXkUDy+IufIP1e2XvljB6jFzgjy9BXyrOMIBUCI45A75NUJfxL4 uOdjTXKbILOOVEcgAPvst5mAes0+7KBpI45tw99NCqk3wk+mKHssQeBrEBaN7u3Dh8F8E99Qf/uG vYlJ9sx6Ca0ceDvaWKXdoNwyUVxQyaE66wU4TA== ) dns1.PKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190428112502 20190421112502 17376 pki.gov. PMS5Sw1e2QBKsqQVv/YUCBHnN/bNHtswK0FjwqSULBq0iaySlh5EpqbEn6rY6uQ9MKiVHlww6mDQ G36Og66P7uhmUqO+go/u4zEqCjjLBkR5fhNeGH8BxoVzTiyMEstsN88T15zt/qN3KWXhHCAs7TR2 94QozJ24WCglBO+N3QLO50gVHRlInPyCulZQQZUlNlbghGKEmf9lNzbS8+WfMlFAaTib/6FnJoFu ILB+cqdI+HlPBmDp3Wwind/uqlFJRWKdtIXm1Jm5zpdfrPnC6KcEF+kcdu7oez/G8NiXQ508RGlQ P7h6tY+4iKU84WBjEYV+puf1bEzvxZpXF5k46w== ) dns1.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190428112502 20190421112502 52401 pki.gov. AuVwWIX9LOfJ85Vf8BQs1WCcoUo/veRcCgMWJ53NGWCdcJk920/wB5p+Oc2pOkTfxZcefqyN3Wwl z4g3/QTToN+V49i8ZPpbt+SIz2Qw4jXd6XruIezAInSGIpYc7y2sSyA8V8aRS/lByw4S97sRsaXp KylpRfpsgg+6NE0YC+6BVM5iH2AYG/VagHYGsMJjoqrXuLVfvBFsvz3EBtQXa0uPLFswBoqUAvKP gP7AQvk9gyNx0tcl0RtIJfeuZ9wdEBM9keeY/bzJM+dn06d3U7jcjx0rDP5R4H9HeaXd19xs9K3R Xi5JDFY7SIJqq5k7PdHZ8u04T1ret1pxIkm1Cw== ) dns2.PKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190428112502 20190421112502 17376 pki.gov. g8QPRXGaN2GIs3ISoblr0abNoPq/ASU2EYPTW7thPZXEcTBMtydmF5mxUwmbjSenmvfaY44X16eF fyef/OckVFy3xQqw6g9p3zeNaJ7dgRTVKd2BHZ8PAGY18KHk7CRfxhG8sJjAtnkxykP4Iw7qamCb /jfNgbUiDEGXphpKop3UpAUgAPjISNaGs9tG53ZNxxsdAis3yjnILok6BkLhbkkwPu4haHTQxiVc BVhRDX2N8JO4Iv5ZULQqD5pRFCU/Acf+32RT9ofaHJvLYFqmokOuJVJaJCenuoYO2rcGhGjKKmOX XWoNmtxw82fsuTwqwbmNHhJ6bEC9rMbZ1Khjow== ) dns2.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20190428112502 20190421112502 52401 pki.gov. lOmXfdtYAekCkW3Z4GDlNycWrYr1Oz2Wye8X8NBey5w7NCSxxG89GynS8/we91fcVCadv6wopuIV wRN0PCHGoUhb5rTrZdE6QNRJBlVODmdBasCBgCIIfwYv5k1gUT6Bhs/ALsVQ1SwB9PkMPo58QIfC FePIzLHWhJ9lq0swQiN/mYzREBWfvXXP4uTZzV4ezZd6QdIk4jwj5AaLZMtx3DkttXC9sQ+MjaFk tnkx3+KswkhWkfxtBVcp1e4intvrT8iv7oxA9w5JlKfvV0NTZDzLdfcFzoFG7vHdrn3UOrOZkyxp F5hZ2N7s7ow7tOxnQE/xSs4EW7IuzI3Cp0iFgg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.PKI.GOV for PKI.GOV/A
	Received 1356 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1356 bytes) ;; HEADER SECTION ;; id = 37537 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) PKI.GOV. 500 IN SOA ( dns1.PKI.GOV. hostmaster.dns1.PKI.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190427140641 20190420140641 17376 pki.gov. P7gK1RxQLU4WAOmV4X+riweigyYhgj1IDOe3igvyuLmb/GEf7yzkzkC4riKgIrLjblEFEKuTi9gh TbYlfVBzrW62OvWNh0KoC4XZbOCk82WJYkrqKi0vTD3uOl133LeqnE/ENKMZx2LjIPm5Zm1Bfcw1 N8V1441cwAtYEr7hJTIQHNOnFoR+AqBJSm2QqNBC9ll4iPCHjqIiKP1TQm6sTOoJSPt623wigAOa KAaQ1qg/PrN6pBWX0Vv4qMDEgXBAHsY4DOGeifjg5lelgRg88n0cVlNZL7OV64WON1FfkII05BC9 /VCFVbBwS1LidmOS5joOhAJqP4a67G+hphmtRg== ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190428042933 20190421042933 52401 pki.gov. KIbEgp7pNhwV/3JzaD42qP/vi4do62WoObM8Vfh9x/g9ccKy5yz/r427e3lqy5hePTjSbwaoPd6I OpKbLav58FMmOBe251RF8GdHIS2Qht2Bpq7kdp+AifPxQbC5OSKzMsp56G8Vmb9e9IoznA1UicOM MEWYC1Pb0BCoBJu3hr//SOLdF40Fj8uxNgJ8yBNdAsNxiICNOq12NPSr+yrhr1jm4nfQl8QYC6wq ttDwyPVg2Snu/Loj/l7/zvYeICO/VRl6Vb02nCkDhKCAqLIWY2W7sBU0tO/y29RcTdrTEbE5Vpak Ij1Kz+Zjxe9UtsnhDiSInPayWnoZUMcLACEtxA== ) je7798cdd9aqjhssnl161a3gfp0el8pt.PKI.GOV. 86400 IN NSEC3 ( 1 0 1 db8fea2c9c8bcde4 je7798cdd9aqjhssnl161a3gfp0el8pu NS SOA RRSIG DNSKEY NSEC3PARAM ) je7798cdd9aqjhssnl161a3gfp0el8pt.PKI.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190427140641 20190420140641 17376 pki.gov. LK2+or2ETLCGiITBSYtLqZMJCtXVoVNljRPQSuB+o5tSFGVacepJl9ZMD3ZYwsj/tTOJHj2zWhY7 fe2dh7JyerSZuODTX75HgG41YtN+xC3NcC2nE/e17NtbhhZ6OgojBn/fa25AIaFD9MLHqG82+tuC 5zYTu4379X29iCV9y3sCiB6YTosgzzD3fskOz8IyIUlTEPAYUSZMFlsp8UwRtjNXxuqrB/owQO7t YqShtZYUPLcDcWT31RzkqRMiRmdHZzRG+7ADY0fhLPUsccgRSs/+Aby6oDuR5EvW0+NdJp9ke3Yq rZ3Vyz9Mv3fcTOdcNC5RrHPpKQtkcmuniyi3Jw== ) je7798cdd9aqjhssnl161a3gfp0el8pt.PKI.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190428042933 20190421042933 52401 pki.gov. T3/4hrF+V8D5nl5+isVEEa0r9m02rcvI8iYIjzywlRFanOJl4vqNzQFd/mHSURZRES97VTE95qwC 6R7U9/NayBsQX1fBhGMMdZxFLNOrsCDGXLefysq01DkjP255LDSjo/eQpEcRQgFGOWSixILP3iQd E/d7jj8k0HKhxEep7fDuQ9QYQ2dmfjaLYI7dBygDAt3uzLv/gV7IdWXafie+9daRDCcMr3IL9I93 3kBfZE563lOvSwH5nVbNRCcUZ6wvgRUxRvuc0mX0ygLtJ86A4df8JLka9VPtzmfcLa3VgSFYVybQ MjcCp0484yhRZIJMnRlAMg+phHrN6OOjMNLCBQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190427084639 20190420084639 17376 pki.gov. g4CE6Klke3CKDrlEpbcQqdz6HLnGSHrOPB8YZOpK9vLp5duB+ZPf+eWQasBcF4CwXvsoiKDjeOvq G2x4IWcEd8gjOhF+MmCI8p80Zzk4BsiiQAIEdCxSSNLd0ziDnptjfoAJy7f225gfdTtBq/ycYc10 pmdPV4PJzlywbcCWpwCBXbXc5tk2cFH6DT+oWqEm5vnTeXUT6kXMAA+ZhzQO4Cvvie/k8FfSOrt6 L2OYF694yOWoTaBikbKATia77/ERmy9CYlPxcx+busKPoFMS/a4GAEPTiO1I6ByELPEGpm+e51OO EAUZ5ushTmFxLpp2gl6cIqbxD8StlYAdiIgY/A== )`
	`PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20190428052956 20190421052956 52401 pki.gov. BdoJIaY7OFPnSXzdsCEadgJGH2Cww6XpFpGE1SYpgWANz/wmGAU50MGuJ1RRGROPVyVFEEM2+D2/ 3q35kQQBTvQvfqQgVAdhnz7Vr3i3I1ZlnNwORGK5Ksx1B9uaSSLSoDQVAodIph8jnuK4wBtxpc1n DYEEHX8QyPYmPOkXxVWIF2VttDUQcn8zwWOMZ6KA2YGpbRTjtPwW6vA2x3XST4VGoWFJnmHijoTT 1lQAKzQW4eZ7q8ab3nKIH2GD6weqs84l3xHkInx1T8xFebQmR6DnK5raqaXgv1D2Wq5MOdXm/Cva 4rcH0BCfGYfX9R1sOqZrfB6f4MB3zZw2XaKGaA== )`
	RRSIG=17376 and DNSKEY=17376 verifies the SOA RRset
	RRSIG=52401 and DNSKEY=52401 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test PKI.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: